sergiotoca

Products

ProductCVEsExploitedLatest
STM Gallery 1.91–Jan 7, 2026

Exploited and recent CVEs

  • CVE-2025-13848 Medium 6.4 STM Gallery 1.9 <= 0.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes 0.3%